Dir 816a2
Vendor:
First CVE: May 13, 2018 · Active for 8 years
16
Total CVEs
Bottom 1%
4.0
Avg CVEs / Year
Bottom 1%
9.6
Avg CVSS
Higher Avg CVSS than 87% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Dir 816a2 over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 13, 2018
8 years ago
Most Recent CVE
May 1, 2025
449 days ago
CVE Severity & Scoring
Dir 816a216 CVEs
94%
All CVEs352,231 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network16 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low16 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None16 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (6.3%)
High0 (0.0%)
None15 (93.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-0921CRITICAL A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSe | Jan 26, 2024 | 9.8 | 47 | NO | NO |
CVE-2023-43240CRITICAL D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter. | Sep 21, 2023 | 9.8 | 34 | NO | NO |
CVE-2023-43239CRITICAL D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC. | Sep 21, 2023 | 9.8 | 34 | NO | NO |
CVE-2023-43237CRITICAL D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC. | Sep 21, 2023 | 9.8 | 34 | NO | NO |
CVE-2018-11013CRITICAL Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 (CN) routers with firmware version 1.10B05 allows unauthenticated remote attackers to execu | May 13, 2018 | 9.8 | 34 | NO | NO |
CVE-2018-17066CRITICAL An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime. | Sep 15, 2018 | 9.8 | 33 | NO | NO |
CVE-2018-17064CRITICAL An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogappl | Sep 15, 2018 | 9.8 | 33 | NO | NO |
CVE-2018-20305CRITICAL D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userconfig.cgi handler function, a lo | Dec 20, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-17068CRITICAL An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/Diagnosis rou | Sep 15, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-17063CRITICAL An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/NTPSyncWi | Sep 15, 2018 | 9.8 | 31 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Dir 816a2
Top CWEs
Versions
No cataloged versions.